Tufin SecureTrack

More documents

Recommendations

Info

untracked or unlogged), permissive rules (that allow traffic from too many IP addresses), network object name patterns, firewall OS settings, and more. Scalable, Distributed Deployment Architecture and Multi-Tenancy At large organizations, firewalls and related security infrastructure are frequently distributed at multiple sites, even in different countries. Slow network connections can frustrate attempts to analyze data from a central location and maintain consistency throughout the organization. Similarly, at large datacenters, network devices are often distributed on multiple management servers to increase performance. Yet it is still important to manage the security posture centrally. Tufin SecureTrack features a robust distributed architecture that uses T-Series appliances to collect data from each site. Suitable for wide area networks, the collectors forward data to a central database for administration. SecureTrack is designed to overcome connection downtime between components and ensure a continuous, centralized management environment. If you need to maintain integrity between sites or business units, SecureTrack provides full segregation of data along with flexible, role-based administrator definitions that provide access control for each management domain. At the same time, it gives you the ability to leverage Policy Analysis Queries and reports that you have designed for multiple tenants. For all mission critical data centers, Tufin offers high availability, database compression, highperformance appliances and disaster recovery. Firewall Operations, Auditing and Compliance: The Automated Solution As network security infrastructure grows more distributed and diverse, operations teams must have central management solutions to ensure network security and Continuous Compliance, while keeping costs under control. Tufin SecureTrack enables you to monitor, track and report changes for all Cisco firewalls, routers and switches in the organization. It creates a complete audit trail with full personal accountability for every change, along with configurable audit reports that support a wide variety of standards and regulations. With in-depth analysis tools, it gives you the power to proactively assess risks, replace permissive rules, and optimize the performance of your firewalls. SecureTrack is an essential solution for any organization that cannot afford to compromise on security and efficiency. Tufin is a member of the Cisco Developer Network and Tufin Security Suite has successfully completed interoperability testing with Cisco Security Manager 4.3. According to an analysis performed by Frost & Sullivan, organizations can slash the time required to make configuration changes, and to perform security audits, by as much as 75% (see Security Lifecycle Management ROI). Tufin customers report that on average, SecureTrack cuts the cost of daily operations tasks in up to a half, so that they can focus on the strategic part of their jobs instead of on routine, manual work. SecureTrack features all of the tools that operations teams need to ensure network security every day: � Change tracking and analysis: Monitors firewall changes, reports them in real-time and maintains a comprehensive, accurate audit trail for full accountability. � Security infrastructure optimization: Analysis and clean-up of complex ACLs and objects to eliminate potential security breaches and improve performance. Firewall Operations for Cisco 10/11
� Risk management: Assessment of Security Score and risk trends based on conformance to compliance policies and industry-standard risk factors. � Network topology intelligence: Discovery of network topology from monitored devices and creation of a dynamic map including firewalls, routers and network zones. Automatic identification of relevant devices and zones in requests, queries and reports. � Rule documentation and recertification: Documentation of ACEs and automatic identification of expired ACEs so that they can be removed and recertified as needed. � Auditing and regulatory compliance: Automated audit reports to demonstrate compliance with corporate policy and regulatory standards including PCI-DSS, SOX, NERC, HIPAA, ISO 17799 and Basel II. � Cisco DCR: Checks for common security settings and misconfigurations on Cisco routers. � Multi-vendor visual monitoring: Intuitive, graphical views of ACLs and other security policies, for the largest variety of vendors and network devices. � Comprehensive security policy analysis: In-depth analysis of organizational security policy implementation on a wide range of security devices. � Automatic firewall policy generation: Definition of a new firewall ACL based on an analysis of network traffic and elimination of permissive rules. � Multi-vendor best practice audit: Ability to compare current configuration with best practice recommendations derived from extensive industry experience. � Scalable and business-critical: Includes high availability, database compression, robust appliances and disaster recovery. � Distributed, multi-tenant architecture: Distributed architecture supports unlimited firewalls, rules and network objects in large or distributed datacenters. Support for multiple tenants or domains provides security among customers or business units. Learn more about SecureTrack at www.tufin.com. © 2008, 2009, 2010, 2011, 2012 Tufin Software Technologies, Ltd. Tufin, SecureChange, SecureTrack, Automatic Policy Generator, and the Tufin logo are trademarks of Tufin Software Technologies Ltd. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. Firewall Operations for Cisco 11/11
Page 1 and 2: SecureTrack Security Operations Man
Page 3 and 4: Introduction Managing network secur
Page 5 and 6: Configuration Change Management Org
Page 7 and 8: the report uses your compliance pol
Page 9: Automatic Security Policy (ACL) Gen

Tufin SecureTrack

Create successful ePaper yourself

Delete template?

Save as template?